$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: mzZHXga4seobb1aeqI8RDE8k4GOi+1dBt+0dHipbhNA= Subject key identifier: 6A:DD:60:51:02:E2:15:E7:FE:5F:95:7C:CF:F1:0F:D4:C5:1B:44:AC Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 5C53705008FAF1C8326AD11691A3372632869F7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 01C9 Signing time: Wed 25 Mar 2026 11:02:19 +0000 Manifest this update: Wed 25 Mar 2026 10:57:19 +0000 Manifest next update: Sat 28 Mar 2026 18:32:19 +0000 Files and hashes: 1: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: wh7Fdyn8JnW6IH9m7ipEpSxhCm0bct69gg1havmp1HI=) 2: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 3: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: XRR8oor//V2IuRQmaPl+QnumcGK2doN5NfQKW3qBvPE=) 4: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: nmctoMYkDgA8/S7N7kyu78eibNA+g17O1Xuhn/JxhXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:53:70:50:08:fa:f1:c8:32:6a:d1:16:91:a3:37:26:32:86:9f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Mar 25 10:57:19 2026 GMT Not After : Mar 28 18:32:19 2026 GMT Subject: CN=6ADD605102E215E7FE5F957CCFF10FD4C51B44AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:df:41:11:48:83:9a:f6:61:25:00:d3:8e: f1:70:0a:13:8f:40:95:26:1e:28:e4:dd:67:88:cd: 16:31:ab:4a:40:60:31:76:88:48:8d:9e:40:78:1a: 33:f9:e3:47:21:a2:a8:69:b4:a5:75:83:5a:d5:45: be:c5:62:52:2a:39:3c:11:86:00:78:8d:eb:e7:e7: 41:86:bb:15:14:f4:88:16:16:10:05:18:c0:e0:91: d5:9b:ea:d1:04:64:d7:29:6a:5f:7a:3d:c8:eb:fc: 5c:89:1a:42:04:75:c7:0c:ec:32:3e:07:7c:89:a9: 73:3a:ae:0b:9d:2e:c0:ea:c4:d1:e9:5f:52:7f:d5: 61:03:09:3f:5b:bb:c8:dd:83:21:b8:53:c7:35:8a: c6:d2:eb:d3:6d:39:db:a3:0c:84:69:58:c3:e8:9d: ee:19:57:5a:51:28:02:7c:12:0d:80:f6:13:4d:c7: 9e:f9:df:f2:86:45:e9:46:84:03:e7:63:6a:5a:9b: 86:a2:85:33:87:87:6e:c1:ce:2f:66:7b:44:68:7c: 8f:46:15:c6:47:e2:a4:98:50:ed:21:2e:26:73:d6: c5:5d:cf:b4:be:92:11:57:b4:52:30:dd:78:9f:99: 71:33:80:71:ad:27:82:0a:31:a6:52:9a:a0:5b:50: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DD:60:51:02:E2:15:E7:FE:5F:95:7C:CF:F1:0F:D4:C5:1B:44:AC X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ab:ae:0e:cb:0c:66:8f:f8:2d:9e:4f:5f:a2:b8:94:3f:d6: e4:82:9d:34:84:8c:90:3b:cd:fb:51:6a:15:16:3f:36:65:32: 24:6a:93:da:78:a3:33:6b:ec:73:4a:e3:a3:49:d1:cd:67:68: 27:19:8f:75:30:1e:0e:ee:2c:31:9e:c6:7f:e5:6a:f2:2e:43: ad:1d:31:6a:e7:a4:d0:c1:49:91:cd:26:51:35:a9:74:92:7f: 16:d3:7f:07:43:34:db:10:ad:6a:c9:83:6d:a3:01:fa:fa:c1: 1d:c4:a7:0a:81:72:92:89:21:4f:d1:32:d8:aa:5e:5c:a5:86: 2f:db:7f:c2:c2:9c:33:db:ff:6d:28:42:d0:8e:2e:85:38:19: 02:5d:9c:bd:23:51:69:e6:db:bd:13:a2:20:b7:21:56:07:d1: f9:0a:c6:ff:67:86:30:65:f6:6f:98:f8:23:ba:73:2c:b0:fb: 57:f8:b5:bf:a1:2b:5e:51:f3:53:24:62:a9:a4:b9:c8:e7:14: 2e:d7:0a:a9:8e:16:3b:b4:33:e8:7b:2f:f3:4a:e7:22:ba:0f: f0:df:65:e0:73:bf:96:ca:f1:79:1e:2c:a2:9a:fe:fe:3a:16: f8:bb:74:ba:7d:bb:54:4d:c6:3c:94:7c:de:d0:9e:ab:73:07: e7:b8:54:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFNwUAj68cgyatEWkaM3JjKGn3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNjAzMjUxMDU3MTlaFw0yNjAzMjgxODMyMTlaMDMxMTAvBgNV BAMTKDZBREQ2MDUxMDJFMjE1RTdGRTVGOTU3Q0NGRjEwRkQ0QzUxQjQ0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64d9BEUiDmvZhJQDTjvFwChOP QJUmHijk3WeIzRYxq0pAYDF2iEiNnkB4GjP540choqhptKV1g1rVRb7FYlIqOTwR hgB4jevn50GGuxUU9IgWFhAFGMDgkdWb6tEEZNcpal96Pcjr/FyJGkIEdccM7DI+ B3yJqXM6rgudLsDqxNHpX1J/1WEDCT9bu8jdgyG4U8c1isbS69NtOdujDIRpWMPo ne4ZV1pRKAJ8Eg2A9hNNx5753/KGRelGhAPnY2pam4aihTOHh27Bzi9me0RofI9G FcZH4qSYUO0hLiZz1sVdz7S+khFXtFIw3XifmXEzgHGtJ4IKMaZSmqBbULzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUat1gUQLiFef+X5V8z/EP1MUbRKwwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABerrg7LDGaP+C2eT1+iuJQ/1uSCnTSEjJA7 zftRahUWPzZlMiRqk9p4ozNr7HNK46NJ0c1naCcZj3UwHg7uLDGexn/lavIuQ60d MWrnpNDBSZHNJlE1qXSSfxbTfwdDNNsQrWrJg22jAfr6wR3EpwqBcpKJIU/RMtiq Xlylhi/bf8LCnDPb/20oQtCOLoU4GQJdnL0jUWnm270ToiC3IVYH0fkKxv9nhjBl 9m+Y+CO6cyyw+1f4tb+hK15R81MkYqmkucjnFC7XCqmOFju0M+h7L/NK5yK6D/Df ZeBzv5bK8XkeLKKa/v46Fvi7dLp9u1RNxjyUfN7QnqtzB+e4VPs= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:53 2026 by rpki-client